lp:ubuntu/edgy/krb5

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

9. By Martin Pitt on 2006-09-20

src/include/k5-thread.h: Define__USE_GNU when #include'ing pthread.h so
that src/util/support/threads.c has pthread_mutexattr_setrobust_np()
available. Fixes FTBFS.

8. By Sam Hartman on 2006-08-06

* Add error checking to setuid, setreuid to avoid local privilege
  escalation ; fixes krb5-sa-2006-1, CVE-2006-3084, CVE-2006-3083
* Update standards version to 3.7.2 (no changes required).
* Translation updates.
  - Russian, thanks Yuri Kozlov. (Closes: #380303)

7. By Russ Allbery on 2006-04-15

* Fix double free caused by a zero-length keytab. Thanks, Steve
  Langasek. (Closes: #344295)
* Fix segfault in krb5_kuserok if the local name doesn't correspond to a
  local account. (Discovered in bug #354133.)
* Build a separate libkrb5-dbg package containing the detached debugging
  information for libkrb53 and libkadm55.
* Update debhelper compatibility level to V5 since the dh_strip behavior
  around debug packages changes in V5 and we should use the current
  interface from the beginning.
* Translation updates.
  - Dutch, thanks Vincent Zweije. (Closes: #360444)
  - Galician, thanks Jacobo Tarrio. (Closes: #361809)

6. By Sam Hartman on 2005-12-25

* Configure with --enable-shared --enable-static so that libkrb5-dev
  gets static libraries.
* Fix double free in getting credentials, Closes: #344543

5. By Sam Hartman on 2005-12-16

Fix problem when libpthreads is dynamically loaded into a program
causing mutexes to sometimes be used and sometimes not be used. If
the library starts out without threads support it will never start
using threads support; doing anything else causes hangs.

4. By Sam Hartman on 2005-07-12

* Fix a mistake in variable names that caused the package to be built
  without optimization.
* Allow whitespace before comments in krb5.conf. Thanks, Jeremie
  Koenig. (Closes: #314609)
* GCC 4.0 compile fixes, thanks Daniel Schepler. (Closes: #315618)
* Avoid "say yes" in debconf templates. (Closes: #306883)
* Update Czech translation, thanks Miroslav Kure.
* Update French translation, thanks Christian Perrier. (Closes: #307748)
* Update Portuguese (Brazil) translation, thanks André Luís Lopes.
* New Vietnamese translation, thanks Clytie Siddall. (Closes: #312172)
* Update standards version to 3.6.2 (no changes required).
* DAK can now handle not repeating maintainers in uploaders.
* Fix double free in krb5_recvauth; critical because it is in the code
  path for kpropd and may allow arbitrary code
  execution. (can-2005-1689)
* For the record, most of the changes in this version were made by Russ,
  but I'm doing the upload because of the security fix.
* krb5_unparse_name overflows allocated storage by one byte on 0 element
  principal name (CAN-2005-1175, VU#885830)
* Do not free unallocated storage in the KDC's TCP request handling
  path (CAN-2005-1174, VU#259798)

3. By Sam Hartman on 2005-01-02

* New upstream version
* Changing a password afwter the size of password history has been
    reduced may double free or write past end of an arry; fix
        (CAN-2004-1189/ CERT VU#948033)
     * Conflict between krb5-kdc and kerberos4kth-kdc; also deals with
  krb5-admin-server conflict indirectly, Closes: #274763

2. By Sam Hartman on 2004-08-31

* Initial Czech translations thanks to Miroslav Kure, Closes: #264366
* Updated French debconf translation, thanks Martin Quinson, Closes: #264941
* KDC and clients double-free on error conditions (CAN-2004-0642 VU#795632)
*krb5_rd_cred() double-frees on error conditions(CAN-2004-0643 , CERT
  VU#866472 )
* ASN.1 decoder in MIT Kerberos 5 releases krb5-1.3.4 and
  earlier allows unauthenticated remote attackers to induce
  infinite loop, causing denial of service, including in KDC
  code (CAN-2004-0644 , CERT VU#550464)
* Fix double free in krb524d handling of encrypted ticket contents
  (CAN-2004-0772)

1. By Sam Hartman on 2004-08-31

Import upstream version 1.3.4